nixos/jellyfin: Disable PrivateDevices from hardening to allow GPU endpoints to be accessed

2 years ago · b77494badb
parent 7db19e78ff
commit b77494badb
1 changed files with 2 additions and 1 deletions
--- a/nixos/modules/services/misc/jellyfin.nix
+++ b/nixos/modules/services/misc/jellyfin.nix
@ -70,7 +70,8 @@ in
        LockPersonality = true;

        PrivateTmp = true;
-        PrivateDevices = true;
+        # Disabled to allow Jellyfin to access hw accel devices endpoints
+        # PrivateDevices = true;
        PrivateUsers = true;

        # Disabled as it does not allow Jellyfin to interface with CUDA devices